1z0-908 Exam QuestionsBrowse all questions from this exam

1z0-908 Exam - Question 10


You wish to protect your MySQL database against SQL injection attacks.

Which method would fail to do this?

Show Answer
Correct Answer: AC

Installing and configuring the Connection Control plugin does not directly prevent SQL injection attacks. This plugin is designed to limit the number of connection attempts from a host and to manage connection behavior but does not provide mechanisms to protect against SQL injection. The other methods mentioned, such as avoiding the concatenation of SQL statements and user-supplied values, using stored procedures, and utilizing prepared statements, are effective techniques to prevent SQL injection vulnerabilities.

Discussion

7 comments
Sign in to comment
FelipeKOption: A
Oct 25, 2023

A. installing and configuring the Connection Control plugin. This plugin is used to limit the number of connection attempts from a host, but it does not directly prevent SQL injection attacks.

DhanushkaOption: D
Aug 3, 2023

A prepared statement is a parameterized and reusable SQL query which forces the developer to write the SQL command and the user-provided data separately. The SQL command is executed safely, preventing SQL Injection vulnerabilities

marklvOption: A
Sep 29, 2023

which one does not work, A. Connection Control plugin has nothing to do with sql injection. The rest work.

nkanike1Option: A
Oct 2, 2023

Answer is A. Connection control plugin cannot protect against sql injection.

GalambGOption: D
Jan 4, 2024

The parameterized queries or prepared statements, which help prevent SQL injection vulnerabilities. Answer: D

eena96
Jan 26, 2024

But, the question asks which method would fail to to protect SQL injection attack

rjafOption: A
May 23, 2024

Answer is A. Connection control plugin cannot protect against sql injection.

7206e44Option: A
Jul 11, 2024

A. Can be used for DDoS or limit number of connections, but not necessarily sql injection